$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa File: 462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa (raw, json) Hash identifier: m1jHt/psFH4OWpVemAU64DORIUEpEVjYKN9XtASG75w= Subject key identifier: 39:E6:33:45:52:71:E0:5E:0A:D6:86:FD:7D:BC:29:FD:CA:CF:BD:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E212B14F62289BBE7F1C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 36618 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:12:b1:4f:62:28:9b:be:7f:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=956e5ff1-ed13-43f2-9368-98cc6c2a9e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:9e:60:61:14:a5:34:29:df:a9:96:d3:88: b1:e0:f8:67:5d:9f:77:d1:7d:a9:88:38:3e:44:2f: a2:7e:70:64:fc:d0:18:11:27:fd:d1:50:c8:4b:2a: 23:d5:5b:c5:3d:13:9d:56:d0:cd:d2:c1:2e:fe:ec: d0:87:c5:79:33:bb:fd:c8:03:b5:ab:f9:59:a0:fd: 4a:72:f3:85:73:24:a7:a8:eb:7b:cf:06:9a:19:91: e3:ba:49:1b:3e:e7:62:95:6b:05:99:a7:26:05:16: 48:08:df:78:3f:56:84:f0:79:45:39:79:7c:55:9a: d6:46:79:39:dd:5a:25:36:6b:cf:e1:33:e5:fc:fc: 32:6f:60:03:97:f7:02:a2:8d:20:9f:89:9a:6c:ed: 01:a3:ca:a5:7f:40:6a:d0:13:f5:8a:d4:04:27:51: f8:5e:ac:f4:5c:c3:29:19:b2:f9:f6:d3:bd:cc:c6: 2d:26:d7:64:c6:4b:0e:41:20:c3:e7:29:b1:8f:f8: b1:9b:92:94:11:5a:87:4c:3c:99:63:46:71:5d:8b: f9:cb:16:60:ea:ec:c3:47:89:a9:80:4e:58:bf:7e: e6:8a:0d:ae:0d:54:d6:27:5f:2f:3d:02:79:fc:47: 3e:27:8a:71:7f:3a:ac:e2:a3:26:6c:bc:41:fb:0e: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E6:33:45:52:71:E0:5E:0A:D6:86:FD:7D:BC:29:FD:CA:CF:BD:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/462e7ceb-e32d-30b9-85de-ac4d698e3f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:69:46:79:fe:cb:ff:64:34:71:b3:66:ac:a0:15:6f:40:02: dd:97:4f:9a:17:a7:ad:0e:10:7e:1c:58:91:96:d7:d8:04:bc: 6a:5c:d2:f0:9f:23:6c:68:bd:44:b7:0f:48:10:ac:fb:29:58: 24:a6:0e:39:69:61:6c:b6:77:e0:6e:f3:ca:18:19:fd:0a:1b: 89:c5:4d:6b:70:98:ca:df:ba:38:08:57:80:c6:ae:bf:3e:9b: b1:77:2d:e2:05:0e:e8:e0:9a:b7:b1:2d:19:b2:af:55:de:4f: 6e:8b:57:f6:ea:91:ef:20:d4:bd:73:89:9b:af:24:91:c8:ad: 92:90:6e:11:e5:31:68:ee:70:13:a9:e7:fb:36:1a:6b:f0:f5: d1:d7:a2:b2:a1:65:71:c8:30:c8:24:0b:66:ca:48:2d:8d:e3: c6:cb:2c:de:af:10:1e:f7:be:8e:85:7a:83:56:37:b6:41:29: 7f:d4:35:4e:26:76:d3:68:6c:12:c4:cc:88:22:5f:11:31:2b: e3:b5:8e:24:54:79:88:12:83:5d:8c:f4:da:fe:7d:e3:be:79: 3c:10:de:ad:8f:68:eb:b1:bb:79:b5:eb:25:8c:10:1d:a1:9b: a4:f5:25:a2:da:21:c7:ab:f1:24:dc:3d:3e:6c:bb:66:3d:71: f3:95:20:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hKxT2Iom75/HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTU2ZTVmZjEtZWQxMy00M2YyLTkzNjgtOThjYzZjMmE5ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7eeYGEUpTQp36mW04ix4PhnXZ930X2piDg+ RC+ifnBk/NAYESf90VDISyoj1VvFPROdVtDN0sEu/uzQh8V5M7v9yAO1q/lZoP1K cvOFcySnqOt7zwaaGZHjukkbPudilWsFmacmBRZICN94P1aE8HlFOXl8VZrWRnk5 3VolNmvP4TPl/Pwyb2ADl/cCoo0gn4mabO0Bo8qlf0Bq0BP1itQEJ1H4Xqz0XMMp GbL59tO9zMYtJtdkxksOQSDD5ymxj/ixm5KUEVqHTDyZY0ZxXYv5yxZg6uzDR4mp gE5Yv37mig2uDVTWJ18vPQJ5/Ec+J4pxfzqs4qMmbLxB+w6FfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDnmM0VSceBeCtaG/X28Kf3Kz725MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDYyZTdjZWItZTMyZC0z MGI5LTg1ZGUtYWM0ZDY5OGUzZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAClpRnn+y/9kNHGzZqygFW9AAt2XT5oXp60OEH4cWJGW19gEvGpc 0vCfI2xovUS3D0gQrPspWCSmDjlpYWy2d+Bu88oYGf0KG4nFTWtwmMrfujgIV4DG rr8+m7F3LeIFDujgmrexLRmyr1XeT26LV/bqke8g1L1ziZuvJJHIrZKQbhHlMWju cBOp5/s2Gmvw9dHXorKhZXHIMMgkC2bKSC2N48bLLN6vEB73vo6FeoNWN7ZBKX/U NU4mdtNobBLEzIgiXxExK+O1jiRUeYgSg12M9Nr+feO+eTwQ3q2PaOuxu3m16yWM EB2hm6T1JaLaIcer8STcPT5su2Y9cfOVIM0= -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:53 2025 by rpki-client